Delete session-id cookie if session not loaded.

To defend against session fixation attacks, delete the session-id cookie if the
store load fails.
Merge pull request #33 from mkleehammer/master

Delete session-id cookie if session not loaded.